Using Cisco-AVpair to collect accouting

Dear all,
I want to use Cisco-AVpair from ACS radius to get the modem connection time (time-start like TACACS+).
Could you help me how to do that.
Thanks

The following document has more information on RADIUS Attribute-Value Pairs.
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt26/usergd26/ap_rads.htm

Similar Messages

Cisco AVpair

Hi,
I want to authenticate my pppoe clients using a radius server. PPPOE client sending a username and password as well as a Service Name (which is detected in Router debug as Service Tag <service name>. I want to send this Service Name (Service Tag) as a Cisco AVPair attribute to my radius server. Can anyone help me to sort out this...
I ve configured aaa authorization network defalut group radius;
radius-attribute vsa send authentication;
radius-attribute vsa send accounting.

The Preauthentication Enhancements for Callback feature allows users to dial in to the network access server (NAS) without being charged. This feature enables telecommuters, and other remote network users who dial in, to have the charges applied back to the NAS that they are dialing in to.
When callback is required, the NAS hangs up the current call and dials the caller back. When the NAS performs the callback, only information for the outgoing connection is applied. The rest of the attributes from the preauthentication access-accept message are discarded.
http://www.cisco.com/en/US/docs/ios/12_1t/12_1t5/feature/guide/dtdt2.html

Infrastructure 2.2 using config mode to collect configs?

I am running Cisco Prime LMS 4.2 and Cisco Prime Infrastructure 2.2 in parallel. I just exported the device list and credentials from LMS and imported them into Infrastructure. LMS has syslog alerts set up to notify the boss when "Configured from console by ..." messages get logged. These messages typically come out whenever someone exits config mode, whether any actual changes were made or not.
Basically, the boss got alerts from LMS for every device imported into Infrastructure, caused by something that Infrastructure itself did. The only thing that I can see that Infrastructure did was collect the configs. I haven't found that any changes were actually made. So apparently Infrastructure uses config mode to collect the configs? What in the world for?
Thanks for any insight.
Dave

More information. I have a few old devices that are still using telnet instead of ssh, and also have a packet capture appliance that captured all of this discovery traffic from PI. I filtered out the trace from one of these telnet devices and found the following sequence among a bunch of different show commands:
config t
ip nbar ?
ip nbar
exit
In the particular case of this device, the responses to the ip nbar config commands indicated that the device is not capable of doing nbar. Your mileage may vary.
Dave

How to handle Cisco AVPair Attributes

Hello,
i have a little Problem, so I hope you can help me.
I have an external Radius Server and an ASA5520 which submits the IP-address and the address of the DNA-Server to the registering client (with cisco-avpair = ip:addr=x.y.z.w)
How can I submit the corresponding network mask also (ip:netmask= ?)?
Best Regards
Hartmut B.

Hi
This depend on which Radius server you're using. If its ACS then.... ACS will send the cisco-av-pair automagically if
1) the aaa client is defined as Cisco IOS
2) you use the ip assignment setting at group/user level
Unfortunately it wont send a netmask as well. So in the group page just scroll down until you see the "RADIUS Cisco IOS" section then locate the cisco-av-pair and just enter
"ip:netmask=foobar"
right in the text entry box.
Then submit + restart and it should all work.
Darran

Cisco avpair SSID and WLC

Hi!
I'd like to differenciate users sharing the same ldap directory and radius authentication.
For example, if I have a student and a teacher, i'd like to be sure that the student will stay on its vlans and so on.
I can do this by using vlan attributes and aaa override but if I do that, I will have for example a student connected to the teacher SSID but on the student vlan. It's not a pretty situation...
I read that we can use an cisco avpair attribute to force users to connect only on their SSID but it doesn't seem to work with controller.
Is anybody have a solution for my case?
Thanks

I've used av-pair on the WLC for Web Splash Page, but not ssid restrictions.
I did however find this documentation: http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml
It refers to configuing a NAR (Network Access Restriction) in ACS which makes it sound like you can limit a user to a specific SSID.

Cisco-avpair for both NX-OS and IOS

Using freeradius2-2.1.12. I need to setup read-write access for both Cisco NX-OS and IOS devices. I did the following,
DEFAULT Group == operator-rw, Auth-Type = System
Service-Type = NAS-Prompt-User,
cisco-avpair := "shell:roles*\"network-admin vdc-admin priv-lvl=15\""
I can log into both NX-OS and IOS devices; however, IOS devices only permits exec mode not the privileged exec (enable) mode.
Is there a different syntax that can make this work for both NX-OS and IOS?
Norman

As you have noticed IOS and NX-OS are a little bit different. With NX-OS there isn't a "disabled" mode but just netowrk roles. For IOS can try pushing for example "cisco-avpair =shell:priv-lvl=7" and then define a local priv level 7 on the network device with the needed commands
Thank you for rating!

How do I use Cisco Registered Email Service with 10.7?

I received a email via someone using Cisco Registered Email/Envelope Service. The authentication process required the latest version of JAVA for 10.7, which I downloaded and installed. When I try to logon, the screen hangs with the message "Loading Envelope Tools." If I press "open" again it states "Inactive tools." The alternate method is to open the mail via a secure Web site, which I can open, but I am unable to download attachments. To download attachments, I am directed to a page that begins with "x-msg:" and I get a message that says: "Safari can't open the address .. . because MAC OX doesn't recognize Internet Addresses starting with "x-msg:"

Thanks for the info Roger, this is indeed did work for me (at least the part about signing in on apple.com, haven't tried the rest). Since Apple does not allow for the merging of Apple IDs, my plan is to use the old me.com address (from the free trial) with iCloud but then forward all the messages from the old me.com to my current Apple ID. Problem is all my devices are already associated with iCloud. So... if I want to activate iCloud using the old me.com, how do I do it?
I have two ideas: 1) as you suggest, signing out and signing back in through the iCloud preference pane (either on Mac OS or iOS); but I'm worried this will have consequence - will I be able to sign back in to my main Apple ID account after doing this?
2) create a new user on my Mac and then sign in to iCloud with the old me.com address there, then delete the account.
Thanks for any help with this.

Error Logging into Cisco Agent Desktop whilst using Cisco IP Communicator

Hi there,
I am having an issue whilst using Cisco Agent Desktop Version 7.0. If I use a cisco IP Communicator ( softphone) i get following message, "Login failed due to a configuration error. Please ask you system administrator to associate your phone with the RM JTAPI Provider user ID according to the instructions in the admin guide".
If user logs in to a normal Cisco phone then logs into agent there are no problems.
Bit of a novice so your help would be appreciated.

Hi
In your AppAdmin pages on UCCX, in the Unified CM Configuration screen, there is an 'RM' user defined.
This will be a user in CCMAdmin 'Application Users', which has all your CCX phones associated to it. UCCX uses this to CTI control the handsets... you need to associate the CIPC phone to that user.
Regards
Aaron
Please rate helpful posts...

Use SkyDrive to upload collected files and post screen shot/picture. (Updated: 1/16/2012)

To help community members troubleshoot issues efficiently, sometimes we need to collect related files (such as Event logs, Network traces, Setup
log files, Screenshots, etc.) to perform a specific analysis.
We can simply use SkyDrive, which is a free storage on Windows Live, it’s easy to store and share your files and photos with almost anyone. To make the
steps clear, I would like to share the detailed steps for:
1. How to use SkyDrive to upload collected files?
2. How to post screenshots or other pictures in forum threads?
1.
How to use
SkyDrive to upload collected files?
1)
Open the
SkyDrive site.
2)
In the
Sign In page, if you own a Windows Live ID, please type your Windows Live ID and Password to sign in; Otherwise, you may click Sign Up to register a new one. See the following screen shot.
3)
After signing in Windows Live, click Create folder.
4)     Name
the folder and edit permissions to share with relevant person.
Important Note: You
can share the folder with Everyone if there is no private/sensitive information (such as the screen shot of a prompt error message). To so so, simply select the "Everyone (Public)" option in the "Share with" box. Please refer to the following screen shot:
However, for private information that you do NOT want to be accessed by everyone, it is recommended to share with specified individuals. To do so, you can expand the "Share with" box, choose the "Select people..." option, and then type their
Live IDs in the Individual box. Please refer to the screen shot below:
5)
Drag the previously collected files directly to the Skydrive folder. For example:
6)
Click Upload.
7)
Click on the uploaded files and tell us the URL.
2.
How to post screenshots or other pictures in forum threads?
(This section updated on 1/16/2012 to reflect changes in Skydrive. Thanks to
Jeeped on the Microsoft Answers forums)
1)   Please
use the above method to upload the picture files in advance. Then, in your Skydrive space, Right Click the picture and select
View Original. Press Ctrl + A, or Right Click and select Copy, to select it.
2)
Press Ctrl + C to copy this picture.
3)
Navigate to your post textbox, and press Ctrl + V, or Right Click and select Paste, to paste the picture there.
Then, the picture will be successfully inserted in that thread.

I cant even open windows now!!!! it crashes mecilessly here is a copy of the only dump file i have. i retreved it from second life and cant copy it onto the clip board.
Problem signature: Problem Event Name:BlueScreen OS Version:6.1.7600.2.0.0.768.3 Locale ID:1033
Additional information about the problem: BCCode:124 BCP1:0000000000000000 BCP2:FFFFFA80050BE8F8 BCP3:0000000000000000 BCP4:0000000000000000 OS Version:6_1_7600 Service Pack:0_0 Product:768_1
Files that help describe the problem: C:\Windows\Minidump\073011-29484-01.dmp C:\Users\madamediva\AppData\Local\Temp\WER-72805-0.sysdata.xml
Read our privacy statement online:  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline: C:\Windows\system32\en-US\erofflps.txt
dump_pciidex.sysdump_pciidex.sys+216e730fffff880`01464000fffff8b0`014700000x000000300000c0000x4a5bc1137/13/2009 7:19:47 PMntoskrnl.exentoskrnl.exe+782e2fffff800`02a03000fffff800`02fe00000x005dd0000x4a5bc6007/13/2009 7:40:48 PMMicrosoft® Windows® Operating
SystemNT Kernel & System6.1.7600.16385 (win7_rtm.090713-1255)Microsoft CorporationC:\Windows\system32\ntoskrnl.exeACPI.sysfffff880`00f46000fffff880`00f9d0000x000570000x4a5bc1067/13/2009 7:19:34 PMamdxata.sysfffff880`00c6c000fffff880`00c770000x0000b0000x4a12f2eb5/19/2009
1:56:59 PMatapi.sysfffff880`00e59000fffff880`00e620000x000090000x4a5bc1137/13/2009 7:19:47 PMataport.SYSfffff880`00e62000fffff880`00e8c0000x0002a0000x4a5bc1187/13/2009 7:19:52 PMAtiPcie.sysfffff880`01fe8000fffff880`01ff00000x000080000x4a0054865/5/2009 11:00:22
AMBATTC.SYSfffff880`00e1e000fffff880`00e2a0000x0000c0000x4a5bc3b57/13/2009 7:31:01 PMCI.dllfffff880`00d1a000fffff880`00dda0000x000c00000x4a5be01d7/13/2009 9:32:13 PMCLASSPNP.SYSfffff880`01800000fffff880`018300000x000300000x4a5bc11e7/13/2009 7:19:58 PMCLFS.SYSfffff880`00cbc000fffff880`00d1a0000x0005e0000x4a5bc11d7/13/2009
7:19:57 PMcng.sysfffff880`01000000fffff880`010730000x000730000x4a5bc8147/13/2009 7:49:40 PMcompbatt.sysfffff880`00e15000fffff880`00e1e0000x000090000x4a5bc3b67/13/2009 7:31:02 PMcrashdmp.sysfffff880`01ff0000fffff300`01ffe0000xfffffa800000e0000x4a5bcabd7/13/2009
8:01:01 PMdisk.sysfffff880`01fd2000fffff880`01fe80000x000160000x4a5bc11d7/13/2009 7:19:57 PMdump_dumpfve.sysfffff880`01235000fffff87f`012480000xffffffff000130000x4a5bc18f7/13/2009 7:21:51 PMdump_msahci.sysfffff880`01470000fffff87f`0147b0000xffffffff0000b0000x4a5bcabd7/13/2009
8:01:01 PMfileinfo.sysfffff880`01145000fffff880`011590000x000140000x4a5bc4817/13/2009 7:34:25 PMfltmgr.sysfffff880`010f9000fffff880`011450000x0004c0000x4a5bc11f7/13/2009 7:19:59 PMFs_Rec.sysfffff880`0122b000fffff880`012350000x0000a0000x4a5bc1117/13/2009 7:19:45
PMfvevol.sysfffff880`01f98000fffff880`01fd20000x0003a0000x4a5bc1a77/13/2009 7:22:15 PMfwpkclnt.sysfffff880`01400000fffff880`0144a0000x0004a0000x4a5bc1647/13/2009 7:21:08 PMhal.dllfffff800`02fe0000fffff800`030290000x000490000x4a5bdf087/13/2009 9:27:36 PMhwpolicy.sysfffff880`01f8f000fffff880`01f980000x000090000x4a5bc0fa7/13/2009
7:19:22 PMkdcom.dllfffff800`00bd1000fffff800`00bdb0000x0000a0000x4a5bdfdb7/13/2009 9:31:07 PMkl1.sysfffff880`01830000fffff880`01f8f0000x0075f0000x4c0f985b6/9/2010 9:34:19 AMksecdd.sysfffff880`01200000fffff880`0121a0000x0001a0000x4a5bc1567/13/2009 7:20:54 PMksecpkg.sysfffff880`015d3000fffff880`015fe0000x0002b0000x4a5bc84a7/13/2009
7:50:34 PMmcupdate.dllfffff880`00c9b000fffff880`00ca80000x0000d0000x4a5bdf657/13/2009 9:29:09 PMmountmgr.sysfffff880`00e3f000fffff880`00e590000x0001a0000x4a5bc11a7/13/2009 7:19:54 PMmsahci.sysfffff880`00ff0000fffff880`00ffb0000x0000b0000x4a5bcabd7/13/2009
8:01:01 PMmsisadrv.sysfffff880`00fa6000fffff880`00fb00000x0000a0000x4a5bc0fe7/13/2009 7:19:26 PMmsrpc.sysfffff880`01165000fffff880`011c30000x0005e0000x4a5bc17c7/13/2009 7:21:32 PMmup.sysfffff880`01452000fffff880`014640000x000120000x4a5bc2017/13/2009 7:23:45
PMndis.sysfffff880`01481000fffff880`015730000x000f20000x4a5bc1847/13/2009 7:21:40 PMNETIO.SYSfffff880`01573000fffff880`015d30000x000600000x4bbe946f4/8/2010 10:43:59 PMNtfs.sysfffff880`0124c000fffff880`013ef0000x001a30000x4a5bc14f7/13/2009 7:20:47 PMpartmgr.sysfffff880`00e00000fffff880`00e150000x000150000x4a5bc11e7/13/2009
7:19:58 PMpci.sysfffff880`00fb0000fffff880`00fe30000x000330000x4a5bc1177/13/2009 7:19:51 PMPCIIDEX.SYSfffff880`00c5c000fffff880`00c6c0000x000100000x4a5bc1147/13/2009 7:19:48 PMpcw.sysfffff880`0121a000fffff880`0122b0000x000110000x4a5bc0ff7/13/2009 7:19:27 PMPSHED.dllfffff880`00ca8000fffff880`00cbc0000x000140000x4a5be0277/13/2009
9:32:23 PMMicrosoft® Windows® Operating SystemPlatform Specific Hardware Error Driver6.1.7600.16385 (win7_rtm.090713-1255)Microsoft CorporationC:\Windows\system32\PSHED.dllPxHlpa64.sysfffff880`01159000fffff880`01164e000x0000be000x4a4162536/23/2009
7:16:35 PMrdyboost.sysfffff880`010bf000fffff880`010f90000x0003a0000x4a5bc48a7/13/2009 7:34:34 PMspldr.sysfffff880`0144a000fffff880`014520000x000080000x4a0858bb5/11/2009 12:56:27 PMtcpip.sysfffff880`01602000fffff880`017ff0000x001fd0000x4bbe94e24/8/2010 10:45:54
PMvdrvroot.sysfffff880`00fe3000fffff880`00ff00000x0000d0000x4a5bcadb7/13/2009 8:01:31 PMvolmgr.sysfffff880`00e2a000fffff880`00e3f0000x000150000x4a5bc11d7/13/2009 7:19:57 PMvolmgrx.sysfffff880`00c00000fffff880`00c5c0000x0005c0000x4a5bc1417/13/2009 7:20:33 PMvolsnap.sysfffff880`01073000fffff880`010bf0000x0004c0000x4a5bc1287/13/2009
7:20:08 PMWdf01000.sysfffff880`00e93000fffff880`00f370000x000a40000x4a5bc19f7/13/2009 7:22:07 PMWDFLDR.SYSfffff880`00f37000fffff880`00f460000x0000f0000x4a5bc11a7/13/2009 7:19:54 PMWMILIB.SYSfffff880`00f9d000fffff880`00fa60000x000090000x4a5bc1177/13/2009 7:19:51
PM

Problem accessing company resources remotely using Cisco VPN Client

I connect to my company's network remotely using Cisco VPN client both from a PC (v 4.0.1) and from a MacBook Pro (v 4.9.00)(same configs), and use Remote Desktop to connect to my work computer, and now i'm able to use Citrix to run applications on the company server.
The problem occurs on the Mac when I'm connecting from a location that uses the same private domain IP as our company's private domain. Our company's private domain is 192.168.1.x, so when I'm using the Mac on a WiFi router that happens to be set to 192.168.1.1, the Mac can connect using VPN but the remote desktop cannot connect to my work computer. Presumably, the Mac doesn't "know" that I'm trying to go through the VPN for the connection and not connect to something locally.
This problem seems to be unique to the Mac. Every Windows machine with the same client installed has no problems no matter what WiFi I've tried. The Mac works fine on any WiFi that is not 192.168.1.x.
However, since 192.168.1.x is very common (hotels, airports, etc., its a major problem with the Mac.
Suggestions are greatly appreciated!
Also, now that we're moving to Citrix, our administrator has created a webpage on the intranet that we launch applications from, but the Mac cannot find that page when connected to VPN from 192.168.1.x. Same problem.
Thanks in advance.

Hi,
I presume you have split-tunneling activated.
1. Make sure the 192.168.1.x is on the protected networks and on the MacBook client, disable "Allow local LAN access"
2. Create a separate group for the Mac users and assgn them a different pool (192.168.100.x )and advertise it in your company to point to the VPN Concentrator.
3. Use the NAT feature on your VPN concentrator.
If this helped, please rate.
Regards,
Daniel

Want to playback archived webcast recorded using Cisco webex recording. Downloaded Cisco webex meeting software from apple download page but still cannot play recording

Want to playback archived webcast recorded using Cisco webex recording. Downloaded Cisco webex meeting software from apple download page but still cannot play recording

You will probably find better support about the features of the Webex app on their support page here: http://www.webex.com/products/web-conferencing/mobile-iphone-ipad-faq.html
Doesn;t look like it's listed as a feature of the iPad app.

How to Use Solution Manager to collect Status Reports from Consultants

Hi,
I am planning to use Solution Manager for collecting the weekly status reports from my consultants and maintain it as a repository . Please let me know the best way of doing this in SOLMAN. There should be mailing options too.
BR,
Raj

Hi Rajasan,
to be able to meet this requirement, you need to set up plan working load in admin tab for your resource, they need to update actual data based on the work completion, you will get status of work,
if you require email, you need to set-up scot, then develop a program with execution scheduling
please check and revert
Anil

Using Cisco wireless IP phones in Cisco Call Manager 5.1

Hello,
Currently we are using Cisco CallManager ver.5.1.2.3000-2, Berbee InformaCast ver.6.1.1 and Cisco Unity 1.1 Build 10. We like to replace few Cisco IP Phone 7961G-GE with Cisco Unified Wireless IP Phone 7920 ver.3.0. Does CCM ver. 5.1.2 supports Wireless phones? If it does, how do I configure it? Also, do I have to purchase any new license or other hardware?
Any suggestion / recommendations greatly appreciate.
Alex

Yes, it does:
Cisco Unified IP Phone Series 7900
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/compat/ccmcompmatr.html#wp51474
Config on CUCM itself is no different from any other phones neither other requirements like DLUs.
Of course you should already have APs for connectivity.
HTH
java
if this helps, please rate

How to Use Cisco 3660 or 3745 router for FAx

I want to use Cisco 3660 Router or 3745 Router for Receiving FAX on email. I have NM-2CE1T1-PRI which supports E1 R2 signalling on 3660 and 3745 both. What are the additional hardware requires? Kindly Help.

Hi,
You could use T.37 Store and forward fax which has the feature called Onramp faxing.
On-ramp faxing, in which a voice gateway that handles incoming calls from a standard fax machine or the PSTN converts a traditional Group 3 fax to an e-mail message with a Tagged Image File Format (TIFF) attachment. The fax e-mail message and attachment are handled by an e-mail server while traversing the packet network and can be stored for later delivery or delivered immediately to a PC or to an off-ramp gateway. Below URL is for detaield config.
http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide_chapter09186a00800b5dcf.html
You would not require any extra hardware for the same.
Thanks
GS

How can ftp service on non-standard port be load balanced using Cisco ACE.

How can ftp service on non-standard port be load balanced using Cisco ACE.For example ftp service required on tcp 2000 port

Hi Samarjit,
you can do this by specifying the port number in the class map that you create . Please find the below mentioend config guide where you can specify the tcp/udp port , range or ports or even the wild card to match the port.
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A1/configuration/administration/guide/mapolcy.html#wp1318826
Regards
Abijith

Using Cisco-AVpair to collect accouting

Similar Messages

Maybe you are looking for